CVE-2024-46310

Cfx.re FXServer versions v9601 and earlier are vulnerable to Incorrect Access Control due to an exposed API endpoint. This flaw allows unauthenticated users to read and modify arbitrary user data , specifically via the /players.json file. Impacted data includes sensitive player identifiers (such ...